Lesson 6.1: Capstone: security review of the staging environment

Before Northwind's new staging environment is connected to real data, you're asked for a security review: one account, one storage area, one container host and one Kubernetes namespace, checked against everything in this course. In the lab you confirm you're in the right account, review IAM and keys, test storage from the outside, check audit logging, scan and inspect the container, test Kubernetes permissions, Pod Security and network policies, write each finding with its severity and fix, and seal the report for the platform team.

26 min

You will learn to

Run a structured cloud security review
Combine IAM, storage, logging, container and Kubernetes checks
Rate findings by severity
Write actionable findings
Seal a review report

← Hypothesis-driven threat hunting · All lessons · TLS in practice →